General
- Target setup.exe
- Size 1.0MB
- Sample260625-snsb5ads7p
- SHA256 39f888e016d761874b59f6aa2d65b50140c97b2978ea0cc1867643f8143b5be6
- MD5 a26429cb7d90a7ae854f510ecf6ce7ee
- SHA1 c563b1baaca66dd89ae9322315ba165c21060b9e
- SHA512 2a7ecdcc3c4c23b2180a751cf9e6d8f553bced075b7900d73d17da32627a30545fdf8d5e18dcee5fb664412bd9b02422b61f06553a8e116089dccc7edc27df49
- SSDEEP 24576:xmg1kUBvhdWMF9XVBCHabxnPD4zslosG37h+Yfn2Vwq:cokqlBW6xPkzEoz37h+QNq
- TLSH T1BE352394E93D5C0DCA48167C18F53FAD7F32795841A34B82395CE9902FB2C27AA7A3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.199.128:443
Targets
-
- Target setup.exe
- Size 1.0MB
- SHA256 39f888e016d761874b59f6aa2d65b50140c97b2978ea0cc1867643f8143b5be6
- MD5 a26429cb7d90a7ae854f510ecf6ce7ee
- SHA1 c563b1baaca66dd89ae9322315ba165c21060b9e
- SHA512 2a7ecdcc3c4c23b2180a751cf9e6d8f553bced075b7900d73d17da32627a30545fdf8d5e18dcee5fb664412bd9b02422b61f06553a8e116089dccc7edc27df49
- SSDEEP 24576:xmg1kUBvhdWMF9XVBCHabxnPD4zslosG37h+Yfn2Vwq:cokqlBW6xPkzEoz37h+QNq
- TLSH T1BE352394E93D5C0DCA48167C18F53FAD7F32795841A34B82395CE9902FB2C27AA7A3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.